Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File:                     AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier:          EtQB3qd5hipzBmgH1/RG6v7tfGOwiv0SZ64UIEpVPaQ=
Subject key identifier:   C7:92:9D:23:D3:B6:01:AB:F8:B8:4F:41:B7:A6:52:00:36:2C:98:E6
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer:       /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial:       018F429F8E056EAB15B8B3EA8C849C637F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 08:01:43 +0000
Manifest this update:     Sat 04 May 2024 08:01:43 +0000
Manifest next update:     Sun 05 May 2024 08:01:43 +0000
Files and hashes:         1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: e4/F7dfY1sVcOz/3/6LVeiiQ3uVSNg7zwRBP+hScDW4=)
                          2: CtY1kk6SrmIGR2KvlRbqyX-EhaE.roa (hash: CiumMJrDIb+dFgkujqGoN/JY0Qu2eBMImM/1k5F435k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:8e:05:6e:ab:15:b8:b3:ea:8c:84:9c:63:7f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
        Validity
            Not Before: May  4 08:01:43 2024 GMT
            Not After : May  5 08:01:43 2024 GMT
        Subject: CN=c7929d23d3b601abf8b84f41b7a65200362c98e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:84:80:7b:93:16:78:8e:5d:d5:e7:19:af:
                    7e:7a:25:cc:62:7a:7b:a5:3b:bf:cf:52:d6:80:f2:
                    96:dd:23:8a:f5:e8:50:9d:dc:0b:69:02:a6:70:51:
                    fd:f5:47:e1:44:cd:75:d9:5f:b3:12:36:a1:29:c8:
                    bf:4a:ed:bf:60:44:eb:68:90:4a:f7:3d:23:f2:48:
                    2e:07:1b:3a:0d:e8:eb:8a:8a:33:bc:54:b2:1c:50:
                    1f:75:53:dc:97:fd:6b:5d:0c:b1:c8:d5:32:0f:ee:
                    a8:07:92:b8:9a:af:1c:1d:08:dd:74:34:98:8a:a1:
                    6d:9a:f4:50:ad:31:1f:d5:8c:7c:92:7a:0e:03:16:
                    21:97:2d:04:6e:f8:a5:ca:f9:7c:d4:56:61:48:c3:
                    ef:c0:f6:b8:39:b8:1d:f3:44:8e:58:71:db:d8:49:
                    d7:c7:71:49:fa:19:b7:7c:c5:0f:22:bc:47:84:90:
                    78:14:f6:f2:b4:e1:a4:86:59:9a:91:43:3a:98:a3:
                    5a:3f:ec:a8:2b:12:8c:57:b5:76:43:01:96:d7:41:
                    d3:6d:40:10:73:27:96:08:69:bc:a6:a2:aa:bf:47:
                    bd:58:9e:24:89:ec:0b:d6:93:97:35:80:2c:39:ee:
                    65:2b:3e:85:10:cc:4b:fb:3b:c1:5f:1b:55:6e:4f:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:9D:23:D3:B6:01:AB:F8:B8:4F:41:B7:A6:52:00:36:2C:98:E6
            X509v3 Authority Key Identifier:
                keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:35:98:17:48:b7:22:1e:89:c3:fd:7d:e2:f1:1d:9c:e8:3b:
         a7:29:77:91:48:a7:a6:02:05:58:7e:b4:ba:c0:46:40:6d:37:
         98:0b:16:2f:85:d2:22:41:92:3b:3c:58:ef:15:f9:ad:e2:24:
         0d:17:7e:b3:50:38:5b:3d:7f:cf:eb:43:2f:1e:b7:3f:c9:96:
         3c:69:56:e9:36:04:ed:52:03:e8:59:b9:93:11:34:fb:20:57:
         ef:82:98:e8:00:da:1d:af:04:73:eb:d0:1c:3c:55:b0:a2:9f:
         55:33:b9:35:33:2b:13:ad:a5:40:00:d3:6d:37:ab:ad:d0:87:
         62:39:c8:57:c4:6a:8c:fb:9c:0e:9e:f6:27:1a:19:bc:bd:c5:
         a4:89:89:0e:66:8a:24:59:df:59:d1:01:f2:80:a9:ff:87:b0:
         e7:f5:db:eb:8d:b3:ac:f5:25:61:eb:1e:6a:f9:ec:ba:a3:79:
         25:b4:d7:7c:61:a6:70:5d:e7:17:40:1b:21:5a:4d:1f:c9:55:
         f2:38:13:65:28:7f:5e:17:2a:ac:ae:42:28:0f:8f:a1:54:35:
         53:ae:c6:8b:45:44:0f:dc:f0:2a:66:c4:cf:2a:63:26:1e:d5:
         7a:cc:ee:4a:42:cb:da:96:4d:08:a2:fa:df:62:17:59:1f:cd:
         aa:c1:b9:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Cn44FbqsVuLPqjIScY3+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1
YWQ3NDQwHhcNMjQwNTA0MDgwMTQzWhcNMjQwNTA1MDgwMTQzWjAzMTEwLwYDVQQD
EyhjNzkyOWQyM2QzYjYwMWFiZjhiODRmNDFiN2E2NTIwMDM2MmM5OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HmEgHuTFniOXdXnGa9+eiXMYnp7
pTu/z1LWgPKW3SOK9ehQndwLaQKmcFH99UfhRM112V+zEjahKci/Su2/YETraJBK
9z0j8kguBxs6DejrioozvFSyHFAfdVPcl/1rXQyxyNUyD+6oB5K4mq8cHQjddDSY
iqFtmvRQrTEf1Yx8knoOAxYhly0Ebvilyvl81FZhSMPvwPa4Obgd80SOWHHb2EnX
x3FJ+hm3fMUPIrxHhJB4FPbytOGkhlmakUM6mKNaP+yoKxKMV7V2QwGW10HTbUAQ
cyeWCGm8pqKqv0e9WJ4kiewL1pOXNYAsOe5lKz6FEMxL+zvBXxtVbk/ppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeSnSPTtgGr+LhPQbemUgA2LJjmMB8GA1UdIwQY
MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt
MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk
LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzWYF0i3
Ih6Jw/194vEdnOg7pyl3kUinpgIFWH60usBGQG03mAsWL4XSIkGSOzxY7xX5reIk
DRd+s1A4Wz1/z+tDLx63P8mWPGlW6TYE7VID6Fm5kxE0+yBX74KY6ADaHa8Ec+vQ
HDxVsKKfVTO5NTMrE62lQADTbTerrdCHYjnIV8RqjPucDp72JxoZvL3FpImJDmaK
JFnfWdEB8oCp/4ew5/Xb642zrPUlYeseavnsuqN5JbTXfGGmcF3nF0AbIVpNH8lV
8jgTZSh/XhcqrK5CKA+PoVQ1U67Gi0VED9zwKmbEzypjJh7VeszuSkLL2pZNCKL6
32IXWR/NqsG5ng==
-----END CERTIFICATE-----
Generated at Sat May 4 09:17:31 2024 by rpki-client on console-ams.rpki-client.org